$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa File: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (raw, json) Hash identifier: qWTPIWG+Xl6f+b6vPRhYVp6TrheyBOrVDxwHcPQ/sV8= Subject key identifier: B5:DB:A9:A0:74:AD:B4:88:BB:C2:9F:07:4D:4A:D5:6B:64:05:CB:B0 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584D40CB9E8FD2BC8F03BCD71380 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 22641 IP address blocks: 216.169.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9e:8f:d2:bc:8f:03:bc:d7:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=abbe8d9a-f263-432b-8afd-69811378cfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b7:cf:a5:b0:cc:fe:d6:ca:e7:fa:2b:79:c6: 7a:5c:24:19:95:2e:64:8a:09:ff:77:49:e7:10:be: aa:6e:d7:e9:09:e5:7f:d2:c4:38:09:82:4b:41:80: 92:cd:2a:78:ca:1d:2b:7d:53:18:01:a2:48:5f:63: e0:15:17:31:54:6a:5b:df:0b:b0:11:7e:d8:5f:6a: 00:8b:b3:c2:2f:6d:a2:a8:98:27:5c:f2:ad:8c:2c: 37:56:3f:9b:7d:47:f8:f0:1a:e2:26:f0:90:18:10: 74:ec:3d:69:d3:97:09:1c:5b:20:e3:c6:6d:e0:95: 14:00:e6:d4:88:1f:4a:f5:1d:94:73:ac:02:7c:43: 30:fa:c3:9f:94:0a:1b:45:3d:53:ee:25:16:d7:3a: 02:6d:b5:28:46:dc:68:b4:28:c1:bb:e8:09:c3:69: 14:dc:52:89:05:2a:ed:1c:f7:bf:11:b7:bb:c0:75: f4:43:1e:d2:9d:26:d7:dd:74:ff:70:3c:76:d6:ff: 4c:f2:86:43:b5:8d:c8:65:6e:f7:ad:ce:db:c8:00: 15:80:9a:b6:e7:e3:4b:c1:a6:7c:5e:94:ab:00:29: 20:53:eb:b9:df:ab:e7:75:1e:b0:d2:5e:c9:6a:a1: 15:98:37:16:49:25:7d:3a:f6:6b:8c:dd:c1:86:cd: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:A9:A0:74:AD:B4:88:BB:C2:9F:07:4D:4A:D5:6B:64:05:CB:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4c649115-742b-32bc-aa17-aa4f55ec3133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b3:7f:1c:1e:38:bd:99:c7:72:81:01:46:12:8f:9b:2b:d2: ef:d3:91:d5:5d:77:95:93:9f:29:e2:b0:3b:60:6a:30:eb:93: 02:db:e5:3f:88:5f:0d:67:43:e4:cc:d0:e3:71:77:a3:97:71: 31:79:c5:26:6c:ed:83:51:26:9d:8c:bc:02:b5:16:be:c9:7e: fc:0a:bc:69:13:fa:99:b3:ef:4b:82:e9:3b:91:c5:3d:ea:1e: fa:d7:32:ce:ff:48:16:0b:32:de:ac:3f:29:9f:0c:40:70:8e: 8d:12:23:19:cb:84:19:00:bc:f3:40:4d:56:0f:cc:25:58:9e: 32:c1:66:df:01:48:96:0c:c3:8a:c9:ee:a9:cf:0e:aa:fa:ea: a6:32:7b:02:fd:d0:76:34:59:ba:c2:1f:ad:04:43:96:93:e2: 05:8e:6b:69:38:94:d8:ae:73:1b:28:b8:0f:f8:fd:24:87:8d: d3:d6:86:d4:f9:e8:87:2e:a2:14:7c:a0:67:70:08:62:8c:49: eb:e8:ea:14:2a:20:42:c4:3f:58:8d:91:8c:c3:31:23:ab:7a: 6f:65:08:c5:68:5c:ab:a5:e3:18:b3:4b:5f:cd:f1:f4:46:5a: d9:9d:52:e4:ed:af:6d:56:9e:42:f7:8c:5f:51:29:b7:8e:99: 4a:a6:6e:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay56P0ryPA7zXE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YWJiZThkOWEtZjI2My00MzJiLThhZmQtNjk4MTEzNzhjZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7fPpbDM/tbK5/orecZ6XCQZlS5kign/d0nn EL6qbtfpCeV/0sQ4CYJLQYCSzSp4yh0rfVMYAaJIX2PgFRcxVGpb3wuwEX7YX2oA i7PCL22iqJgnXPKtjCw3Vj+bfUf48BriJvCQGBB07D1p05cJHFsg48Zt4JUUAObU iB9K9R2Uc6wCfEMw+sOflAobRT1T7iUW1zoCbbUoRtxotCjBu+gJw2kU3FKJBSrt HPe/Ebe7wHX0Qx7SnSbX3XT/cDx21v9M8oZDtY3IZW73rc7byAAVgJq25+NLwaZ8 XpSrACkgU+u536vndR6w0l7JaqEVmDcWSSV9OvZrjN3Bhs32hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXbqaB0rbSIu8KfB01K1WtkBcuwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvNGM2NDkxMTUtNzQyYi0z MmJjLWFhMTctYWE0ZjU1ZWMzMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KnSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCzfxweOL2Zx3KBAUYSj5sr0u/TkdVdd5WTnynisDtgajDrkwLb5T+I Xw1nQ+TM0ONxd6OXcTF5xSZs7YNRJp2MvAK1Fr7JfvwKvGkT+pmz70uC6TuRxT3q HvrXMs7/SBYLMt6sPymfDEBwjo0SIxnLhBkAvPNATVYPzCVYnjLBZt8BSJYMw4rJ 7qnPDqr66qYyewL90HY0WbrCH60EQ5aT4gWOa2k4lNiucxsouA/4/SSHjdPWhtT5 6IcuohR8oGdwCGKMSevo6hQqIELEP1iNkYzDMSOrem9lCMVoXKul4xizS1/N8fRG WtmdUuTtr21WnkL3jF9RKbeOmUqmbjo= -----END CERTIFICATE-----Generated at Sat Mar 28 13:43:03 2026 by rpki-client